Claims 

I cl J A method of backing up one or more files on a local device onto remote servers 

over a network comprising: 

deriving a first cryptographic key and a second cryptographic key from a 
user-provided passphrase; 

compressing one or more files and adding each of the files to a bundle; 
generating an authentication code for the bundle using the first 
cryptographic key and adding the authentication code to the bundle; and 
encrypting the bundle using the second cryptographic key prior to 
sending the bundle to the remote server. 



t c2 l The invention of claim 1 wherein the bundle is encrypted using a strong block 

cipher. 

[c3] The invention of claim 1 wherein the authentication code is an HMAC. 

I c4 l The invention of claim 1 wherein the cryptographic keys contain at least 1 28 

bits. 

[c5] A method of restoring one or more files on remote servers to a local device over 



a network comprising: 

deriving a first cryptographic key and a second cryptographic key from a 
user-provided passphrase; 

decrypting a bundle received from the remote server using the second 
cryptographic key; 

checking an authentication code in the bundle using the first 
cryptographic key; and 

decompressing one or more files from the bundle; 



f c6 ] The invention of claim 5 wherein the bundle was encrypted using a strong block 

cipher. 

I c7 ] The invention of claim 5 wherein the authentication code is an HMAC. 

[ c8 l The invention of claim 5 wherein the cryptographic keys contain at least 1 28 

bits. 
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I c9 l A device-readable medium storing program instructions for performing a 

method of backing up one or more files on a local device onto remote servers 
over a network, the method comprising the steps of: 

deriving a first cryptographic key and a second cryptographic key from a 
user-provided passphrase; 

compressing one or more files and adding each of the files to a bundle; 
generating an authentication code for the bundle using the first 
cryptographic key and adding the authentication code to the bundle; and 
encrypting the bundle using the second cryptographic key prior to 
sending the bundle to the remote server. 



[cl 0] The invention of claim 9 wherein the bundle is encrypted using a strong block 

cipher. 

[cl 1 ] The invention of claim 9 wherein the authentication code is an HMAC 

[cl 2] The invention of claim 9 wherein the cryptographic keys contain at least 1 28 

bits. 

t cl 3] A device-readable medium storing program instructions for performing a 



method of restoring one or more files on remote servers to a local device over a 
network, the method comprising the steps of: 

deriving a first cryptographic key and a second cryptographic key from a 

user-provided passphrase; 

decrypting a bundle received from the remote server using the second 
cryptographic key; 

checking an authentication code in the bundle using the first 
cryptographic key; and 

decompressing one or more files from the bundle; 

[cl 4] The invention of claim 1 3 wherein the bundle was encrypted using a strong 

block cipher. 

t cl 5 J The invention of claim 1 3 wherein the authentication code is an HMAC. 

Icl6] 

The invention of claim 1 3 wherein the cryptographic keys contain at least 1 28 
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bits. 
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